Mailing List Archive

How to determine virus database version from behind proxy?
Hi,

in my current working environment I do not have direct internet access,
nor is it possible to query public DNS servers.
Running a command like "host -t txt current.cvd.clamav.net" yields no
result.
The only way out is a proxy.
I still would like to figure out whether or not my local database is up
to date.
Can I retrieve the information contained in the DNS TXT record via a
http(s) source as well? If so, how?

Thanks a lot in advance.

André
Re: How to determine virus database version from behind proxy? [ In reply to ]
You could query using DoH:
#curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT'


> -----Original Message-----
> From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On
> Behalf Of André Weidemann
> Sent: Thursday, July 09, 2020 9:45 AM
> To: clamav-users@lists.clamav.net
> Subject: [clamav-users] How to determine virus database version from behind
> proxy?
>
> Hi,
>
> in my current working environment I do not have direct internet access,
> nor is it possible to query public DNS servers.
> Running a command like "host -t txt current.cvd.clamav.net" yields no
> result.
> The only way out is a proxy.
> I still would like to figure out whether or not my local database is up
> to date.
> Can I retrieve the information contained in the DNS TXT record via a
> http(s) source as well? If so, how?
>
> Thanks a lot in advance.
>
> André




_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: How to determine virus database version from behind proxy? [ In reply to ]
There are several DOH severs.

You could also try:

curl -H 'accept: application/dns-json' '
https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'


... or even just:


curl 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'


On Thu, Jul 9, 2020 at 3:51 PM Eric Tykwinski <eric-list@truenet.com> wrote:

> You could query using DoH:
> #curl -H 'accept: application/dns-json' '
> https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT'
>
>
> > -----Original Message-----
> > From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On
> > Behalf Of André Weidemann
> > Sent: Thursday, July 09, 2020 9:45 AM
> > To: clamav-users@lists.clamav.net
> > Subject: [clamav-users] How to determine virus database version from
> behind
> > proxy?
> >
> > Hi,
> >
> > in my current working environment I do not have direct internet access,
> > nor is it possible to query public DNS servers.
> > Running a command like "host -t txt current.cvd.clamav.net" yields no
> > result.
> > The only way out is a proxy.
> > I still would like to figure out whether or not my local database is up
> > to date.
> > Can I retrieve the information contained in the DNS TXT record via a
> > http(s) source as well? If so, how?
> >
> > Thanks a lot in advance.
> >
> > André
>
>
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
Re: How to determine virus database version from behind proxy? [ In reply to ]
Or for more advertised privacy:

curl -H 'accept: application/dns-json' '
https://mozilla.cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=AAAA
'


On Thu, Jul 9, 2020 at 7:58 PM Richard Graham <rickhg12hs@gmail.com> wrote:

> There are several DOH severs.
>
> You could also try:
>
> curl -H 'accept: application/dns-json' '
> https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>
>
> ... or even just:
>
>
> curl 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>
>
> On Thu, Jul 9, 2020 at 3:51 PM Eric Tykwinski <eric-list@truenet.com>
> wrote:
>
>> You could query using DoH:
>> #curl -H 'accept: application/dns-json' '
>> https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT
>> '
>>
>>
>> > -----Original Message-----
>> > From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On
>> > Behalf Of André Weidemann
>> > Sent: Thursday, July 09, 2020 9:45 AM
>> > To: clamav-users@lists.clamav.net
>> > Subject: [clamav-users] How to determine virus database version from
>> behind
>> > proxy?
>> >
>> > Hi,
>> >
>> > in my current working environment I do not have direct internet access,
>> > nor is it possible to query public DNS servers.
>> > Running a command like "host -t txt current.cvd.clamav.net" yields no
>> > result.
>> > The only way out is a proxy.
>> > I still would like to figure out whether or not my local database is up
>> > to date.
>> > Can I retrieve the information contained in the DNS TXT record via a
>> > http(s) source as well? If so, how?
>> >
>> > Thanks a lot in advance.
>> >
>> > André
>>
>>
>>
>>
>> _______________________________________________
>>
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>>
>
Re: How to determine virus database version from behind proxy? [ In reply to ]
You’re just giving your lookup to someone else.

Sent from my ? iPhone

> On Jul 9, 2020, at 14:11, Richard Graham via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> ?
> Or for more advertised privacy:
>
> curl -H 'accept: application/dns-json' 'https://mozilla.cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=AAAA'
>
>> On Thu, Jul 9, 2020 at 7:58 PM Richard Graham <rickhg12hs@gmail.com> wrote:
>> There are several DOH severs.
>>
>> You could also try:
>>
>> curl -H 'accept: application/dns-json' 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>>
>> ... or even just:
>>
>> curl 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>>
>>> On Thu, Jul 9, 2020 at 3:51 PM Eric Tykwinski <eric-list@truenet.com> wrote:
>>> You could query using DoH:
>>> #curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT'
>>>
>>>
>>> > -----Original Message-----
>>> > From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On
>>> > Behalf Of André Weidemann
>>> > Sent: Thursday, July 09, 2020 9:45 AM
>>> > To: clamav-users@lists.clamav.net
>>> > Subject: [clamav-users] How to determine virus database version from behind
>>> > proxy?
>>> >
>>> > Hi,
>>> >
>>> > in my current working environment I do not have direct internet access,
>>> > nor is it possible to query public DNS servers.
>>> > Running a command like "host -t txt current.cvd.clamav.net" yields no
>>> > result.
>>> > The only way out is a proxy.
>>> > I still would like to figure out whether or not my local database is up
>>> > to date.
>>> > Can I retrieve the information contained in the DNS TXT record via a
>>> > http(s) source as well? If so, how?
>>> >
>>> > Thanks a lot in advance.
>>> >
>>> > André
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>>
>>> clamav-users mailing list
>>> clamav-users@lists.clamav.net
>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>>
>>>
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>>
>>> http://www.clamav.net/contact.html#ml
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
Re: How to determine virus database version from behind proxy? [ In reply to ]
Lol, there is a long thread on mail ops that pretty much says the same. But he asked about checking through a proxy on http protocol so that’s his choice.

Sent from my iPhone

> On Jul 9, 2020, at 5:55 PM, Joel Esler (jesler) via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> ?You’re just giving your lookup to someone else.
>
> Sent from my ? iPhone
>
>>> On Jul 9, 2020, at 14:11, Richard Graham via clamav-users <clamav-users@lists.clamav.net> wrote:
>>>
>> ?
>> Or for more advertised privacy:
>>
>> curl -H 'accept: application/dns-json' 'https://mozilla.cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=AAAA'
>>
>>> On Thu, Jul 9, 2020 at 7:58 PM Richard Graham <rickhg12hs@gmail.com> wrote:
>>> There are several DOH severs.
>>>
>>> You could also try:
>>>
>>> curl -H 'accept: application/dns-json' 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>>>
>>> ... or even just:
>>>
>>> curl 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>>>
>>>> On Thu, Jul 9, 2020 at 3:51 PM Eric Tykwinski <eric-list@truenet.com> wrote:
>>>> You could query using DoH:
>>>> #curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT'
>>>>
>>>>
>>>> > -----Original Message-----
>>>> > From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On
>>>> > Behalf Of André Weidemann
>>>> > Sent: Thursday, July 09, 2020 9:45 AM
>>>> > To: clamav-users@lists.clamav.net
>>>> > Subject: [clamav-users] How to determine virus database version from behind
>>>> > proxy?
>>>> >
>>>> > Hi,
>>>> >
>>>> > in my current working environment I do not have direct internet access,
>>>> > nor is it possible to query public DNS servers.
>>>> > Running a command like "host -t txt current.cvd.clamav.net" yields no
>>>> > result.
>>>> > The only way out is a proxy.
>>>> > I still would like to figure out whether or not my local database is up
>>>> > to date.
>>>> > Can I retrieve the information contained in the DNS TXT record via a
>>>> > http(s) source as well? If so, how?
>>>> >
>>>> > Thanks a lot in advance.
>>>> >
>>>> > André
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>>
>>>> clamav-users mailing list
>>>> clamav-users@lists.clamav.net
>>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>>>
>>>>
>>>> Help us build a comprehensive ClamAV guide:
>>>> https://github.com/vrtadmin/clamav-faq
>>>>
>>>> http://www.clamav.net/contact.html#ml
>>
>> _______________________________________________
>>
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
Re: How to determine virus database version from behind proxy? [ In reply to ]
Just as a side note now that I’m back to a desktop, I did run FB’s implementation of DoH. It was strictly test based, so not under load, but it did work locally for about 10 PCs: https://github.com/facebookexperimental/doh-proxy <https://github.com/facebookexperimental/doh-proxy>

Sadly, I don’t know of really any local DoH resolvers that can be used to scale, and I honestly don’t think it’ll last as long as I think most people think it will.

Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300

> On Jul 9, 2020, at 6:20 PM, Eric Tykwinski <eric-list@truenet.com> wrote:
>
> Lol, there is a long thread on mail ops that pretty much says the same. But he asked about checking through a proxy on http protocol so that’s his choice.
>
> Sent from my iPhone
>
>> On Jul 9, 2020, at 5:55 PM, Joel Esler (jesler) via clamav-users <clamav-users@lists.clamav.net> wrote:
>>
>> ?You’re just giving your lookup to someone else.
>>
>> Sent from my ? iPhone
>>
>>> On Jul 9, 2020, at 14:11, Richard Graham via clamav-users <clamav-users@lists.clamav.net> wrote:
>>>
>>> ?
>>> Or for more advertised privacy:
>>>
>>> curl -H 'accept: application/dns-json' 'https://mozilla.cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=AAAA <https://mozilla.cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=AAAA>'
>>>
>>> On Thu, Jul 9, 2020 at 7:58 PM Richard Graham <rickhg12hs@gmail.com <mailto:rickhg12hs@gmail.com>> wrote:
>>> There are several DOH severs.
>>>
>>> You could also try:
>>>
>>> curl -H 'accept: application/dns-json' 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A <https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A>'
>>>
>>> ... or even just:
>>>
>>> curl 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A <https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A>'
>>>
>>> On Thu, Jul 9, 2020 at 3:51 PM Eric Tykwinski <eric-list@truenet.com <mailto:eric-list@truenet.com>> wrote:
>>> You could query using DoH:
>>> #curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT <https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT>'
>>>
>>>
>>> > -----Original Message-----
>>> > From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net <mailto:clamav-users-bounces@lists.clamav.net>] On
>>> > Behalf Of André Weidemann
>>> > Sent: Thursday, July 09, 2020 9:45 AM
>>> > To: clamav-users@lists.clamav.net <mailto:clamav-users@lists.clamav.net>
>>> > Subject: [clamav-users] How to determine virus database version from behind
>>> > proxy?
>>> >
>>> > Hi,
>>> >
>>> > in my current working environment I do not have direct internet access,
>>> > nor is it possible to query public DNS servers.
>>> > Running a command like "host -t txt current.cvd.clamav.net <http://current.cvd.clamav.net/>" yields no
>>> > result.
>>> > The only way out is a proxy.
>>> > I still would like to figure out whether or not my local database is up
>>> > to date.
>>> > Can I retrieve the information contained in the DNS TXT record via a
>>> > http(s) source as well? If so, how?
>>> >
>>> > Thanks a lot in advance.
>>> >
>>> > André
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>>
>>> clamav-users mailing list
>>> clamav-users@lists.clamav.net <mailto:clamav-users@lists.clamav.net>
>>> https://lists.clamav.net/mailman/listinfo/clamav-users <https://lists.clamav.net/mailman/listinfo/clamav-users>
>>>
>>>
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq <https://github.com/vrtadmin/clamav-faq>
>>>
>>> http://www.clamav.net/contact.html#ml <http://www.clamav.net/contact.html#ml>
>>>
>>> _______________________________________________
>>>
>>> clamav-users mailing list
>>> clamav-users@lists.clamav.net
>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>>
>>>
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>>
>>> http://www.clamav.net/contact.html#ml
>>
>> _______________________________________________
>>
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
Re: How to determine virus database version from behind proxy? [ In reply to ]
On Thu, Jul 9, 2020 at 11:55 PM Joel Esler (jesler) <jesler@cisco.com>
wrote:

> You’re just giving your lookup to someone else.
>

That includes typical lookups to DNS servers. One could ask who has access
to each query, what they do with it, how long do they keep it, who else do
they give it to, etc.

What do you think about DNS over TOR?

On Jul 9, 2020, at 14:11, Richard Graham via clamav-users <
> clamav-users@lists.clamav.net> wrote:?

Or for more advertised privacy:
>
> curl -H 'accept: application/dns-json' '
> https://mozilla.cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=AAAA
> '
>
>
> On Thu, Jul 9, 2020 at 7:58 PM Richard Graham <rickhg12hs@gmail.com>
> wrote:
>
>> There are several DOH severs.
>>
>> You could also try:
>>
>> curl -H 'accept: application/dns-json' '
>> https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>>
>>
>> ... or even just:
>>
>>
>> curl 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>>
>>
>> On Thu, Jul 9, 2020 at 3:51 PM Eric Tykwinski <eric-list@truenet.com>
>> wrote:
>>
>>> You could query using DoH:
>>> #curl -H 'accept: application/dns-json' '
>>> https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT
>>> '
>>>
>>>
>>> > -----Original Message-----
>>> > From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On
>>> > Behalf Of André Weidemann
>>> > Sent: Thursday, July 09, 2020 9:45 AM
>>> > To: clamav-users@lists.clamav.net
>>> > Subject: [clamav-users] How to determine virus database version from
>>> behind
>>> > proxy?
>>> >
>>> > Hi,
>>> >
>>> > in my current working environment I do not have direct internet access,
>>> > nor is it possible to query public DNS servers.
>>> > Running a command like "host -t txt current.cvd.clamav.net" yields no
>>> > result.
>>> > The only way out is a proxy.
>>> > I still would like to figure out whether or not my local database is up
>>> > to date.
>>> > Can I retrieve the information contained in the DNS TXT record via a
>>> > http(s) source as well? If so, how?
>>> >
>>> > Thanks a lot in advance.
>>> >
>>> > André
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>>
>>> clamav-users mailing list
>>> clamav-users@lists.clamav.net
>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>>
>>>
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>>
>>> http://www.clamav.net/contact.html#ml
>>>
>>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
>
Re: How to determine virus database version from behind proxy? [ In reply to ]
I’m a fan of using DNS as DNS. There’s several free DNS providers, heck, Cisco owns one. But, I want my DNS traffic (as with all traffic) to be the fastest it can possibly be.

Sent from my ? iPhone

> On Jul 9, 2020, at 19:41, Richard Graham <rickhg12hs@gmail.com> wrote:
>
> ?
>
>
>> On Thu, Jul 9, 2020 at 11:55 PM Joel Esler (jesler) <jesler@cisco.com> wrote:
>> You’re just giving your lookup to someone else.
>
> That includes typical lookups to DNS servers. One could ask who has access to each query, what they do with it, how long do they keep it, who else do they give it to, etc.
>
> What do you think about DNS over TOR?
>
>> On Jul 9, 2020, at 14:11, Richard Graham via clamav-users <clamav-users@lists.clamav.net> wrote:?
>>> Or for more advertised privacy:
>>>
>>> curl -H 'accept: application/dns-json' 'https://mozilla.cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=AAAA'
>>>
>>>> On Thu, Jul 9, 2020 at 7:58 PM Richard Graham <rickhg12hs@gmail.com> wrote:
>>>> There are several DOH severs.
>>>>
>>>> You could also try:
>>>>
>>>> curl -H 'accept: application/dns-json' 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>>>>
>>>> ... or even just:
>>>>
>>>> curl 'https://dns.google.com/resolve?name=current.cvd.clamav.net&type=A'
>>>>
>>>>> On Thu, Jul 9, 2020 at 3:51 PM Eric Tykwinski <eric-list@truenet.com> wrote:
>>>>> You could query using DoH:
>>>>> #curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT'
>>>>>
>>>>>
>>>>> > -----Original Message-----
>>>>> > From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On
>>>>> > Behalf Of André Weidemann
>>>>> > Sent: Thursday, July 09, 2020 9:45 AM
>>>>> > To: clamav-users@lists.clamav.net
>>>>> > Subject: [clamav-users] How to determine virus database version from behind
>>>>> > proxy?
>>>>> >
>>>>> > Hi,
>>>>> >
>>>>> > in my current working environment I do not have direct internet access,
>>>>> > nor is it possible to query public DNS servers.
>>>>> > Running a command like "host -t txt current.cvd.clamav.net" yields no
>>>>> > result.
>>>>> > The only way out is a proxy.
>>>>> > I still would like to figure out whether or not my local database is up
>>>>> > to date.
>>>>> > Can I retrieve the information contained in the DNS TXT record via a
>>>>> > http(s) source as well? If so, how?
>>>>> >
>>>>> > Thanks a lot in advance.
>>>>> >
>>>>> > André
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>>
>>>>> clamav-users mailing list
>>>>> clamav-users@lists.clamav.net
>>>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>>>>
>>>>>
>>>>> Help us build a comprehensive ClamAV guide:
>>>>> https://github.com/vrtadmin/clamav-faq
>>>>>
>>>>> http://www.clamav.net/contact.html#ml
>>>
>>> _______________________________________________
>>>
>>> clamav-users mailing list
>>> clamav-users@lists.clamav.net
>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>>
>>>
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>>
>>> http://www.clamav.net/contact.html#ml
Re: How to determine virus database version from behind proxy? [ In reply to ]
On 09.07.2020 15:51, Eric Tykwinski wrote:
> You could query using DoH:
> #curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT'

Thank you very much for the quick answer. I had tried using doh-client
btw, which did not work behind a proxy.

I ended up using python to get the string I needed.
That's the start of it:

#!/usr/bin/env python3
import requests

proxies = {
"http": "http://10.10.10.10:8000",
"https": "http://10.10.10.10:8000",
}
url='https://cloudflare-dns.com/dns-query?name=current.cvd.clamav.net&type=TXT'
headers = {'accept': 'application/dns-json'}

requ = requests.get(url, headers=headers, proxies=proxies)
workstring = requ.json()['Answer'][0]['data'].replace('"','')
print(workstring)

André

> >
>> -----Original Message-----
>> From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On
>> Behalf Of André Weidemann
>> Sent: Thursday, July 09, 2020 9:45 AM
>> To: clamav-users@lists.clamav.net
>> Subject: [clamav-users] How to determine virus database version from behind
>> proxy?
>>
>> Hi,
>>
>> in my current working environment I do not have direct internet access,
>> nor is it possible to query public DNS servers.
>> Running a command like "host -t txt current.cvd.clamav.net" yields no
>> result.
>> The only way out is a proxy.
>> I still would like to figure out whether or not my local database is up
>> to date.
>> Can I retrieve the information contained in the DNS TXT record via a
>> http(s) source as well? If so, how?
>>
>> Thanks a lot in advance.
>>
>> André
>
>
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>